Global Cyber Incident Response Leader

The British American Tobacco Group; Monterrey; Presencial; MXN 1.200.000 - 1.800.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Annual bonus

Health plans

Work-life balance initiatives

Transportation support

Flexible holiday plan

Descripción de la vacante

British American Tobacco Mexico is seeking a Senior Manager Cybersecurity Incident Response to lead a 24x7 global security operations team in Monterrey. The role requires hands-on incident response, forensics, threat hunting, and executive communications, with a focus on building resilience and continuous improvement across detection, response and cyber resilience capabilities.

The ideal candidate will manage major cyber incidents, coordinate with Legal, Compliance, Privacy, and Internal Audit,

Formación

• Bachelor's Degree in Computer Science, Cybersecurity or equivalent practical experience.
• 6 to 10 years of cybersecurity experience, including Incident Response, Digital Forensics, Threat Hunting or Security Operations.
• Proven experience leading large-scale enterprise cyber incidents as Incident Commander or technical lead.
• Experience leading technical teams through people management or operational leadership.
• Demonstrated principal-level investigative capability across endpoint, cloud, identity and enterprise environments.
• Experience in global or Follow-the-Sun security operations and communicating with executive stakeholders.
• Experience in multinational enterprises or leading incident response consultancy is desirable.
• GIAC (GCFA, GCIH, GREM, GNFA, GCTI), CISSP or CISM desirable.

Responsabilidades

• Lead Incident Commander for major cyber incidents, including ransomware and data breaches.
• Provide risk-based updates to senior leadership and coordinate with Legal, Compliance, Privacy and others on incident response.
• Participate in the CDC on-call rotation ensuring Follow-the-Sun operations and vendor coordination.
• Define and lead investigations across endpoint, cloud, identity, SaaS, email and network environments.
• Conduct in-depth technical analysis, establish attack timelines, identify root causes, and drive containment.
• Drive metrics, automation, AI adoption, playbooks and post-incident remediation tracking.
• Partner with SOC, Detection Eng, SecOps, Cloud Security, Identity, and Vulnerability teams to strengthen resilience.
• Recruit and mentor incident responders with hands-on expertise across multiple security domains.

Conocimientos

Incident Command

Leadership

Digital Forensics

Threat Hunting

Security Operations

Cloud Security

Endpoint Forensics

Python

PowerShell

MITRE ATT&CK

SOAR

Automation

Educación

Bachelor's degree in Computer Science/Cybersecurity

Herramientas

AWS

Azure

Entra ID

Microsoft 365

SOAR

Descripción del empleo

British American Tobacco Mexico is seeking a Senior Manager Cybersecurity Incident Response to lead a 24x7 global security operations team in Monterrey. The role requires hands-on incident response, forensics, threat hunting, and executive communications, with a focus on building resilience and continuous improvement across detection, response and cyber resilience capabilities.

The ideal candidate will manage major cyber incidents, coordinate with Legal, Compliance, Privacy, and Internal Audit,